Multiple layers of security controls are placed throughout Treasury Software. Security in ACH Universal includes:
-
Database encryption (AES-256)
-
Password protection
-
Full audit trail
-
Automated backups
-
SQL Server security
-
Segregation of duties
-
SSH-FTP encrypted transmission
Database encryption (AES-256) of sensitive data
Encryption - To keep data from getting out
ACH Universal encrypts all account numbers using the most secure symmetrical encryption algorithm available. AES is used by the U.S. and Canadian governments as standards for encrypting data.
Hashing - To protect unauthorized insertions/changes from getting in
Each record is hashed--and the hash is encrypted--to make sure that records remain unchanged and no records are inserted by circumventing the system.
Password Protection (Front-end user access control)
Limit access to only authorized users.
Integrate with Windows Active Directory (Windows Login ID), or create login ID's from within ACH Universal.
Full Audit Trail
Logs all activity at both the record and file level.
Record level - ACH Trace Number
In addition to tracking the import and transmission logs, the system captures the ACH Trace Number.
The individual ACH Trace Number can be used to track the transaction throughout the ACH Network as well as third-party applications, and can assist with returned transactions.
File level
ACH Universal also maintains file import and transmittal logs. Below is an example of an import log, which includes the Windows user login name and the workstation used.
Automated Backups
Enable your system to back up your data and settings using our built-in automated desktop backup. The backup file can be sent to any shared drive on your network.
If you are not using the Desktop version, you can use our SQL tools to trigger backups with SQL Express and SQL Server databases, or use the backup tools that you already use in-house.
ACH Universal can run on a desktop database, SQL Express or SQL Server.
The Gold Standard of Security
While each database has its advantages and disadvantages, Microsoft SQL Server provides the 'Gold Standard' of security. It can be easily integrated into Active Directory, and managed with familiar tools such as Microsoft SQL Server Management Studio.
Don't have SQL Server? No problem.
Treasury Software includes a copy of the SQL Express database engine for free when you license our Workgroup platform.
Segregation of Duties (requires Enterprise/SQL Server platform and Advanced (Processor) edition license)
Our Segregation of Duties feature enables you to grant access and limit access to users based on their role.
Treasury Software uses a traditional Role and User environment, enabling you to assign permissions so your users can import, create files and perform administrative tasks.
SSH-FTP Transmission encryption
Transmit to your bank automatically and securely with our SSH-FTP client. SSH encrypts the tunnel, enabling you to send files securely.
ACH Universal includes the tools to create private and public keys, which you may need if exchanging keys with your bank.
SSH-FTP requires the ACH Corporate or Advanced (Processor) edition.
Additional Utilities - Encrypt any file
ACH Universal provides you with the capability to encrypt any file with AES 256 encryption.
This feature:
-
is compatible with WinZip. Therefore, your bank--or any receiver--can decrypt using WinZip (assuming you supply them with the password).
-
can be used for any file, not just for ACH files. Feel free to secure any file.
-
is capable of both encrypting as well as decrypting a file.